break-golf

break-golf A board for cryptanalysis results that are proved , not run. A challenge fixes two worlds and the statement you must prove. You write an adversary and a proof that it distinguishes them. The win is the proof: nothing is executed, sampled, or replayed, and no human reads the submission ...

RevShell

🔥 RevShell Project — Advanced Windows Reverse Shell root@kitploit: ██▀███ ▓█████ ██▒ █▓ ██████ ██░ ██ ▓█████ ██▓ ██▓ ▓██ ▒ ██▒▓█ ▀ ▓██░ █▒ ▒██ ▒ ▓██░ ██▒ ▓█ ▀ ▓██▒ ▓██▒ ▓██ ░▄█ ▒▒███ ▓██ █▒░ ░ ▓██▄ ▒██▀▀██░ ▒███ ▒██░ ▒██░ ▒██▀▀█▄ ▒▓█ ▄ ▒██ █░░ ▒ ██▒░▓█ ░██ ▒▓█ ▄ ▒██░ ▒██░ ░██▓ ▒██▒░▒████▒ ▒▀█░...

CVE-2024-9796

CVE-2024-9796 POC SQLi - CVE-2024-9796 Functional PoC for vulnerability CVE-2024-9796, which affects the WP Advanced Search autocompletion plugin in WordPress, allowing SQL injection through unsanitized GET parameters. 📌 Description This vulnerability allows an attacker to inject arbitrary SQL...

CICD-Goat-Vapt-Writeup

CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Why this exists Most...

umbra

Umbra An external overlay for THE FINALS on Linux. It reads the game's memory from a separate process, draws a transparent click-through window on top of it, and provides an aim assist and a triggerbot. Nothing is injected into the game and nothing is ever written back; the tool reads memory and...

CVE-2020-15169

README This README would normally document whatever steps are necessary to get the application up and running. Things you may want to cover: Ruby version System dependencies Configuration Database creation Database initialization How to run the test suite Services job queues, cache servers, searc...

CVE-2023-4279

CVE ID : CVE-2023-4279 Vulnerability Type : IP Address Spoofing Description : This plugin retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic. Steps to reproduce : root@kitploit: 1...

CVE-2023-22515-Scan.

CVE-2023-22515-Scan About This is simple scanner for CVE-2023-22515, a critical vulnerability in Atlassian Confluence Data Center and Server that is actively being exploited in the wild by threat actors in order "to create unauthorized Confluence administrator accounts and access Confluence...

smb_usermap

smbusermap A simple exploit for CVE-2007-2447, present in Samba 3.0.20. You can exploit this vuln with even less than this, for instance, with smbclient, but I think it's tough to do complex commands, since a lot of special chars probably get eaten, but a simple command reboot in this case can be...

CVE-2019-17137

CVE-2019-17137 Info CVE: https://vulners.com/cve/CVE-2019-17137 POC root@kitploit: GET /index.htm%00currentsetting.htm HTTP/1.1 Host: 192.168.1.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Accept: / Accept-Language:...

Codiad-CVE-2018-14009

install codiad @ git clone https://github.com/Codiad/Codiad.git Steps to reproduction 1. Setup a vulnerable environment on ubuntu server with Codiad 2.8.4 latest version root@kitploit: @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git...

audit-xss-cve-2020-7934

CVE 2020-7934 How to run CVE Requirements 1. docker Remarks it's possible put the script attack online given the js code http://yourjavascript.com/ Our Js script online for the attack html Commands for configuration 1. go to root folder of this project 2. run "sudo docker-compose up --build" 3. n...

test-44228

test-44228 A simple example for CVE-2021-44228 Implements two java CLIs, one using log4j v1.x, the other using log4j 2.x to demonstrate the log4shell vulnerability. See also: https://www.lunasec.io/docs/blog/log4j-zero-day/ https://www.oracle.com/security-alerts/alert-cve-2021-44228.html Usage...

ShinyHunters hacks rival extortion gang and takes over its dark web site

Reportedly, the ShinyHunters extortion group breached the leak site of one of its competitors, the Clop ransomware gang. ShinyHunters is a financially motivated cybercrime and extortion group active since 2019. It is known for stealing large volumes of data and pressuring victims to pay, rather...

CVE-2018-13341

CVE-2018-13341 This Tool Aims to Exploit the CVE-2018-13341, By Using the MAC address of the targeted device, you can recover the password of the "crengsuperuser" hidden account which has elevated privileges and allow you to run SUDO commands. The Crestron Toolbox Protocol CTP can be connected to...

CVE-2022-29598

CVE-2022-29598 : Reflected Cross-Site Scripting XSS in RSS v500 Mitre URL: https://vulners.com/cve/CVE-2022-29598 NIST URL: https://nvd.nist.gov/vuln/detail/CVE-2022-29598 The RRS v500 application by Solutions Atlantic is vulnerable to a reflected Cross-Site Scripting XSS vulnerability...

libunwind_CVE-2015-3239_After

-- mode: Outline - - This is version 1.0 of the unwind library. This library supports several architecture/operating-system combinations: Linux/x86-64: Works well. Linux/x86: Works well. Linux/ARM: Works well. Linux/IA-64: Fully tested and supported. Linux/PARISC: Works well, but C library missin...

watchTowr-vs-Progress-ShareFile-CVE-2026-2699

CVE-2026-2699 Progress ShareFile Authentication Bypass Progress ShareFile Authentication Bypass Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if Progress ShareFile instance is vulnerable to CVE-2026-2699 authentication bypass. Detection Artifact Generato...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet is a production-grade Zero-Trust Network Access ZTNA framework specifically engineered for Small Office/Home Office SOHO environments. By orchestrating a secure, identity-aware VPN overlay utilizing the WireGuard protocol, SafeNet provides granular control...

CVE-2025-55182

CVE-2025-55182 — React2Shell Critical Remote Code Execution in React Server Components. Severity: CRITICAL | CVSS v3.1: 10.0 Maximum | Status: Actively Exploited What Is This? React2Shell is a critical security vulnerability in React Server Components RSC — a modern feature that lets React run...